Bug#434844: security update broke xulrunner-xpcom.pc

2007-07-30 Thread Mike Hommey
On Fri, Jul 27, 2007 at 06:58:50PM +0200, Mike Hommey [EMAIL PROTECTED] wrote:
 It was a temporary workaround for #413964, which at the time was
 supposed to not last very long, and had to change because of #416425.
 
 I guess changing the dependency to a = one should be enough to be safe
 in the future, but I'll do some testing with pkgconfig.

I implemented the proper fix, that should not break for future security
updates, and am currently uploading the corrected package to
security-master. I also added fixes that were already in -0etch2 but
that were dropped because not that important (and because it failed to
build due to the presence of a source tarball in the changes file I
uploaded).

Mike


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#434844: security update broke xulrunner-xpcom.pc

2007-07-27 Thread Rene Engelhard
Package: libxul-dev
Version: 1.8.0.13~pre070720-0etch1
Severity: grave
Tags: etch security

On my OOo build on etch:

/home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
dmake: Executing shell macro: $(PKGCONFIG) $(PKGCONFIG_PREFIX) --cflags
$(PKGCONFIG_MODULES)
Package 'Mozilla Plug-In API' requires 'xulrunner-xpcom =
1.8.0.13~pre070720' but version of XPCOM is 1.8.0.13pre
dmake:  Error code 1, while making 'Shell escape'
---* RULES.MK *---

ERROR: Error 65280 occurred while making
/home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
make[1]: *** [stamp/build] Fehler 1
make[1]: Leaving directory
`/home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build'
make: *** [debian/stampdir/build] Fehler 2
debuild: fatal error at line 1228:
debian/rules build failed

works with stables xulrunner (1.8.0.11-2).

Regards,

Rene

-- System Information:
Debian Release: 4.0
  APT prefers proposed-updates
  APT policy: (500, 'proposed-updates'), (500, 'stable')
Architecture: powerpc (ppc)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-5-powerpc
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)

Versions of packages libxul-dev depends on:
ii  libmozjs-dev   1.8.0.13~pre070720-0etch1 Development files for the Mozilla 
ii  libnspr4-dev   1.8.0.13~pre070720-0etch1 Development files for the NetScape
ii  libnss3-dev1.8.0.13~pre070720-0etch1 Development files for the Network 
ii  libxul0d   1.8.0.13~pre070720-0etch1 Gecko engine library
ii  xulrunner  1.8.0.13~pre070720-0etch1 XUL + XPCOM application runner

libxul-dev recommends no packages.

-- no debconf information


signature.asc
Description: Digital signature


Bug#434844: security update broke xulrunner-xpcom.pc

2007-07-27 Thread Alexander Sack
On Fri, Jul 27, 2007 at 02:06:11PM +0200, Mike Hommey wrote:
  
  /home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
  dmake: Executing shell macro: $(PKGCONFIG) $(PKGCONFIG_PREFIX) --cflags
  $(PKGCONFIG_MODULES)
  Package 'Mozilla Plug-In API' requires 'xulrunner-xpcom =
  1.8.0.13~pre070720' but version of XPCOM is 1.8.0.13pre
  dmake:  Error code 1, while making 'Shell escape'
  ---* RULES.MK *---
  
  ERROR: Error 65280 occurred while making
  /home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
  make[1]: *** [stamp/build] Fehler 1
  make[1]: Leaving directory
  `/home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build'
  make: *** [debian/stampdir/build] Fehler 2
  debuild: fatal error at line 1228:
  debian/rules build failed
  
  works with stables xulrunner (1.8.0.11-2).
 
 *sigh* one good reason not to change version numbers in security
 updates...
 
 Security team, Alex: what do we do with that ? Do we want to wait for
 final 1.8.0.13 or fix this now ?

Fix it asap .. what is the original reason for this btw?

 
 Mike
 

 - Alexander



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#434844: security update broke xulrunner-xpcom.pc

2007-07-27 Thread Mike Hommey
On Fri, Jul 27, 2007 at 08:41:21AM +0200, Rene Engelhard [EMAIL PROTECTED] 
wrote:
 Package: libxul-dev
 Version: 1.8.0.13~pre070720-0etch1
 Severity: grave
 Tags: etch security
 
 On my OOo build on etch:
 
 /home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
 dmake: Executing shell macro: $(PKGCONFIG) $(PKGCONFIG_PREFIX) --cflags
 $(PKGCONFIG_MODULES)
 Package 'Mozilla Plug-In API' requires 'xulrunner-xpcom =
 1.8.0.13~pre070720' but version of XPCOM is 1.8.0.13pre
 dmake:  Error code 1, while making 'Shell escape'
 ---* RULES.MK *---
 
 ERROR: Error 65280 occurred while making
 /home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
 make[1]: *** [stamp/build] Fehler 1
 make[1]: Leaving directory
 `/home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build'
 make: *** [debian/stampdir/build] Fehler 2
 debuild: fatal error at line 1228:
 debian/rules build failed
 
 works with stables xulrunner (1.8.0.11-2).

*sigh* one good reason not to change version numbers in security
updates...

Security team, Alex: what do we do with that ? Do we want to wait for
final 1.8.0.13 or fix this now ?

Mike


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#434844: security update broke xulrunner-xpcom.pc

2007-07-27 Thread Martin Schulze
Mike Hommey wrote:
  On my OOo build on etch:
  
  /home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
  dmake: Executing shell macro: $(PKGCONFIG) $(PKGCONFIG_PREFIX) --cflags
  $(PKGCONFIG_MODULES)
  Package 'Mozilla Plug-In API' requires 'xulrunner-xpcom =
  1.8.0.13~pre070720' but version of XPCOM is 1.8.0.13pre
  dmake:  Error code 1, while making 'Shell escape'
  ---* RULES.MK *---
  
  ERROR: Error 65280 occurred while making
  /home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
  make[1]: *** [stamp/build] Fehler 1
  make[1]: Leaving directory
  `/home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build'
  make: *** [debian/stampdir/build] Fehler 2
  debuild: fatal error at line 1228:
  debian/rules build failed
  
  works with stables xulrunner (1.8.0.11-2).
 
 *sigh* one good reason not to change version numbers in security
 updates...
 
 Security team, Alex: what do we do with that ? Do we want to wait for
 final 1.8.0.13 or fix this now ?

What's the ETA for 1.8.0.13?

Re OOo build on etch, is this the etch package or the sid/lenny package?
Formally, only the etch package needs to continue building.

Regards,

Joey

-- 
If you come from outside of Finland, you live in wrong country.
-- motd of irc.funet.fi

Please always Cc to me when replying to me on the lists.


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#434844: security update broke xulrunner-xpcom.pc

2007-07-27 Thread Mike Hommey
On Fri, Jul 27, 2007 at 02:22:10PM +0200, Alexander Sack [EMAIL PROTECTED] 
wrote:
 On Fri, Jul 27, 2007 at 02:06:11PM +0200, Mike Hommey wrote:
   
   /home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
   dmake: Executing shell macro: $(PKGCONFIG) $(PKGCONFIG_PREFIX) --cflags
   $(PKGCONFIG_MODULES)
   Package 'Mozilla Plug-In API' requires 'xulrunner-xpcom =
   1.8.0.13~pre070720' but version of XPCOM is 1.8.0.13pre
   dmake:  Error code 1, while making 'Shell escape'
   ---* RULES.MK *---
   
   ERROR: Error 65280 occurred while making
   /home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build/build/current/extensions/source/plugin/base
   make[1]: *** [stamp/build] Fehler 1
   make[1]: Leaving directory
   `/home/rene/Debian/Pakete/openoffice.org/openoffice.org-2.3.0/ooo-build'
   make: *** [debian/stampdir/build] Fehler 2
   debuild: fatal error at line 1228:
   debian/rules build failed
   
   works with stables xulrunner (1.8.0.11-2).
  
  *sigh* one good reason not to change version numbers in security
  updates...
  
  Security team, Alex: what do we do with that ? Do we want to wait for
  final 1.8.0.13 or fix this now ?
 
 Fix it asap .. what is the original reason for this btw?

It was a temporary workaround for #413964, which at the time was
supposed to not last very long, and had to change because of #416425.

I guess changing the dependency to a = one should be enough to be safe
in the future, but I'll do some testing with pkgconfig.

Mike


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of unsubscribe. Trouble? Contact [EMAIL PROTECTED]



Bug#434844: security update broke xulrunner-xpcom.pc

2007-07-27 Thread Rene Engelhard
Hi,

Martin Schulze wrote:
 What's the ETA for 1.8.0.13?
 
 Re OOo build on etch, is this the etch package or the sid/lenny package?
 Formally, only the etch package needs to continue building.

Neither. But etchs version also uses libxul-dev and xulrunner-xpcom,
so.. It's not a OOo specific problem anyway, it's just an example of a
broken xulrunner-xpcom.pc breaking builds of anything trying to use it.

Gr��e/Regards,

Ren�
-- 
 .''`.  Ren� Engelhard -- Debian GNU/Linux Developer
 : :' : http://www.debian.org | http://people.debian.org/~rene/
 `. `'  [EMAIL PROTECTED] | GnuPG-Key ID: 248AEB73
   `-   Fingerprint: 41FA F208 28D4 7CA5 19BB  7AD9 F859 90B0 248A EB73



signature.asc
Description: Digital signature